CVE-2026-104004
Collection validators using collation-accepting expressions can crash MongoDB Server on insert
Published Oct 13, 2026 · updated Oct 15, 2026 · MongoDB MongoDB Server
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · CIRCL Vulnerability Lookup
Detected
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.
Oct 15, 2026 · CIRCL Vulnerability Lookup
Updated
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.
Affected
- vendor MongoDB MongoDB Serverversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-104004
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-104004
Official CVE identifier
cve.org